Gamaredon
Gamaredon is a Russia-attributed nation-state APT group with an ideological motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 47 countries, including the United States and the United Kingdom. It uses 108 MITRE ATT&CK techniques and exploits 5 known CVEs.
Also known as
- IRON TILDEN
- Primitive Bear
- ACTINIUM
- Armageddon
- Shuckworm
- DEV-0157
- Aqua Blizzard
- NastyShrew
- Gamaredon Group
- Origin
- Russia
- Techniques
- 108
- Exploited CVEs
- 5
- First seen
- Jan 1, 2013
- Last seen
- May 12, 2026
- Record updated
Who They Target.
Sectors · 14
Countries · 47
Labelsespionage
About Gamaredon.
A state-aligned cyber espionage group known for aggressive spear-phishing campaigns against Ukrainian entities, continuously innovating malware and evasion techniques.
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.